Re: [DRAFT RFC] Adding Simplified Password Hashing API
| From: | Nikita Popov | Date: | Tue, 03 Jul 2012 08:59:22 +0000 |
| Subject: | Re: [DRAFT RFC] Adding Simplified Password Hashing API | ||
| References: | 1 2 3 4 5 6 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-61078@lists.php.net to get a copy of this message | ||
On Tue, Jul 3, 2012 at 10:42 AM, Pierre Joye <pierre.php@gmail.com> wrote:
> hi!
>
> On Tue, Jul 3, 2012 at 1:23 AM, Anthony Ferrara <ircmaxell@gmail.com> wrote:
>
>> Well, if not for an ini parameter, what way would you suggest to alter
>> the default bcrypt cost? (seriously, I'm open to suggestions)...
>
> Simply by not allowing to change it. If one does not like it, it can
> pass the option value as he wishes.
>
> An ini setting for that sounds wrong to me.
Agree on this. We don't need any more ini settings. Having an
ini-setting would just force everyone to explicitly specify the load
parameter.
Nikita